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Claims 

What is claiined is: 

1 1 . A method for prioritized network security, comprising: 

2 (a) identifying a set of policies, each policy having a condition associated therewith; 

3 (b) determining whether the conditions are met; and 

4 (c) activating the poHcies whose associated conditions are determined to be met; 

5 (d) wherein the conditions represent a priority of the pohcy. 

1 2. The method as recited in claim 1, and further comprising determining whether a 

2 user confirms the activation of the pohcies. 

1 3. The method as recited in claim 2, and further comprising activating the poUcies 

2 if the user confirms. 

1 4. The method as recited in claim 1 , and further comprising updating the set of 

2 policies, 

1 5. The method as recited in claim 4, wherein the updating includes receiving 

2 another inactive pohcy, determining whether the user accepts the inactive poKcy, 

3 and adding the inactive policy to the set if the user accepts the inactive policy. 

1 6. The method as recited in claim 1, wherein the activation of the policies includes 

2 adding the policies to a set of a plurality of active policies, and executing 

3 security actions associated with the active policies if associated hmits are met. 
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1 7. The method as recited in claim 6, and further comprising determining whether 

2 the conditions associated with the active policies are still met, and de-activating 

3 the active policies if the associated conditions are not met. 

1 8. The method as recited in claim 6, and further comprising identifying currently 

2 executed security actions, determining whether a conflict exists between the 

3 currently executed security actions, and resolving any conflicts between the 

4 currently executed security actions. 

1 9. The method as recited in claim 1, wherein the conditions include a time factor. 

1 10. The method as recited in claim 1, wherein the conditions include a source of the 

2 policies. 

1 11. The method as recited in claim 1 , wherein the conditions include a severity of 

2 security actions associated with the policies. 

1 12. A computer program product for prioritized network security, comprising: 

2 (a) computer code for identifying a set of policies, each policy having a condition 

3 associated therewith; 

4 (b) computer code for determining whether the conditions are met; and 

5 (c) computer code for activating the policies whose associated conditions are 

6 determined to be met; 

7 (d) wherein the conditions represent a priority of the policy. 

1 13. The computer program product as recited in claim 12, and further comprising 

2 computer code for determining whether a user confirms the activation of the 

3 policies. 
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14. The computer program product as recited in claim 13, and further comprising 
computer code for activating the policies if the user confirms. 

15. The computer program product as recited in claim 12, and further comprising 
computer code for updating the set of policies. 

16. The computer program product as recited in claim 15, wherein the updating 
includes receiving another inactive policy, determining whether the user accepts 
the inactive policy, and adding the inactive policy to the set if the user accepts 
the inactive policy. 

17. The computer program product as recited in claim 12, wherein the activation of 
the policies includes adding the policies to a set of a plurality of active policies, 
and executing security actions associated with the active pohcies if associated 
limits are met. 

1 8. The computer program product as recited in claim 17, and further comprising 
computer code for determining whether the conditions associated with the active 
policies are still met, and de-activating the active pohcies if the associated 
conditions are not met. 

19. The computer program product as recited in claim 17, and further comprising 
computer code for identifying currently executed security actions, determining 
whether a conflict exists between the currently executed security actions, and 
resolving any conflicts between the currently executed security actions. 

20. The computer program product as recited in claim 12, wherein the conditions 
include a time factor. 
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21. 


The computer program product as recited in claim 12, wherein the conditions 
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include a source of the policies. 
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therewith; 
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(b) 


logic for determining whether the conditions are met; and 
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identifying a set of policies each having an associated security action and a limit 
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(c) 


executing the security actions of the policies whose associated limits are 
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determined to be met; 
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(d) 


identifying currently executed security actions; 
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determining whether a conflict exists between the currently executed security 
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actions; and 
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(f) 


resolving any conflicts between the currently executed security actions. 
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25. 


The method as recited in claim 24, wherein each policy has an associated 
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priority, and the conflicts are resolved based on the priority. 
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1 26. A method for prioritized network security, comprising: 

2 (a) identifying a set of security actions, each security action having a Umit and a 

3 priority associated therewith; 

4 (b) determining whether the hmits are met; and 

5 (c) executing the security actions whose associated limits are determined to be met; 

6 (d) wherein the security actions are executed based on the priority. 

1 27. A method for prioritized network security, comprising: 

2 (a) identifying a set of poUcies, each pohcy having a condition and a priority 

3 associated therewith; 

: ^ 4 (b) determining whether the conditions are met; and 

i' 

5 (c) activating the poHcies whose associated conditions are determined to be met; 

i'U 6 (d) wherein the poUcies are activated based on the priority. 



1 28. A method for prioritized network security, comprising: 

2 (a) identifying a set of poUcies, each pohcy having a condition associated therewith; 

3 (b) determining whether the conditions are met; and 

4 (c) activating the poUcies whose associated conditions are determined to be met; 

5 (d) wherein the conditions represent an urgency associated with an issue causing the 

6 pohcy to be activated. 



1 29. A method for providing network security, comprising: 

2 (a) identifying a set of a plurality of inactive policies each including a security 

3 action, a condition for activating the policy, and a Umit for triggering the security 

4 action if the poUcy is active; 

5 (b) updating the set of inactive policies including: 

6 (i) receiving another inactive policy, 

7 (ii) determining whether the user accepts the inactive policy, and 
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8 (iii) adding the inactive policy to the set if the user accepts the inactive 

9 policy; 

1 0 (c) determining whether the conditions are met for the inactive poHcies; 

1 1 (d) determining whether a user confirms the activation of the inactive poUcies if the 

12 associated conditions are met; and 

1 3 (e) activating the inactive policies if the user confirms, the activation including: 

14 (i) adding the inactive policies to a set of a plurality of active policies, 

1 5 (ii) determining whether the conditions associated with the active policies 

16 are still met, 

17 (iii) de-activating the active policies if the associated conditions are not met, 
U 18 and 

!' £ 19 (iv) executing the security actions associated with the active policies if the 

•!Ssr 

• U 20 associated conditions are met and the limits are met, the execution of tiie 

fl 21 security actions including: 

'ill 22 (1) identifying currently executed security actions, 

23 (2) determining whether a conflict exists between the currently 

FU 24 executed security actions, and 

25 (3) resolving any conflicts between the currently executed security 



26 actions. 
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